Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
File: GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json)
Hash identifier: q75CtoXtIegvoE276RUxkIQwQX+UiwD+5dI9A7KP/7M=
Subject key identifier: CB:A0:89:98:73:52:25:07:A2:A9:D2:93:83:31:C1:28:E1:A7:41:9F
Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
Certificate issuer: /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Certificate serial: 019EB9C61F462B02533047FEA7987722B6D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
Manifest number: 168C
Signing time: Fri 12 Jun 2026 03:00:29 +0000
Manifest this update: Fri 12 Jun 2026 03:00:29 +0000
Manifest next update: Sat 13 Jun 2026 03:00:29 +0000
Files and hashes: 1: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: WcaPtAWELiMGTRoFnG3TtHl0gZFkh1Lyr0x/XPqXXys=)
2: UqEuoQpjxBtIURq4ob163Ouybdc.roa (hash: ev1UNGyTahVLyeoggfYIhIctJOvLu/cQr0+ArcEASVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:c6:1f:46:2b:02:53:30:47:fe:a7:98:77:22:b6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Validity
Not Before: Jun 12 03:00:29 2026 GMT
Not After : Jun 13 03:00:29 2026 GMT
Subject: CN=cba0899873522507a2a9d2938331c128e1a7419f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:b1:ad:d2:ce:2a:85:d0:55:ab:46:7e:0e:
4c:3a:c1:28:f4:0f:24:ad:0a:2f:6e:58:e0:7d:d2:
22:6f:b6:7e:2b:bc:4c:a5:9c:58:19:54:1c:96:28:
31:be:5a:43:47:f7:10:34:09:20:7d:94:9c:70:78:
0a:0a:69:c7:57:08:95:c5:de:50:d2:be:2c:3d:75:
4e:de:3e:5d:ae:ce:bf:f8:a0:d0:55:bb:69:51:a9:
e0:e5:09:ac:ed:0d:83:5a:ff:8e:59:94:a1:fe:9a:
51:c6:55:d9:b7:2e:4b:5c:f4:b2:ab:46:e6:67:b7:
06:a2:77:d9:37:2f:c1:92:b3:26:f4:5c:86:d7:5c:
e4:94:03:89:8d:5c:83:36:b2:77:5c:4d:f6:ff:68:
96:03:36:ec:a8:fa:98:40:f0:5b:1a:2d:e4:c6:82:
a6:b8:22:31:d6:6d:51:94:7b:9b:da:8b:3d:d7:06:
a5:f6:2b:71:5d:72:1c:f6:82:7c:8c:f1:50:51:ba:
57:d7:e9:60:1a:94:a0:e1:60:85:c9:ae:28:75:dc:
6e:84:49:55:10:49:08:8e:ea:d8:4b:fb:f7:2c:4f:
cd:92:92:12:2f:57:18:d1:b7:5c:5d:c7:d2:10:ff:
a8:b0:c3:d2:0c:d8:f2:35:10:69:80:f8:4c:c5:29:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:89:98:73:52:25:07:A2:A9:D2:93:83:31:C1:28:E1:A7:41:9F
X509v3 Authority Key Identifier:
keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ab:11:5d:4f:99:77:de:45:b7:2f:99:79:fa:ed:d4:e2:76:
f5:a9:93:7f:2f:a5:e0:75:3d:f7:db:bc:4a:da:62:65:3e:fc:
bc:aa:49:7d:09:97:d0:71:7b:1b:b3:e9:b3:b4:2e:f9:be:44:
3f:08:89:19:ca:04:e8:a5:86:c2:a7:2f:b1:06:a1:03:fa:b0:
f7:ef:c9:9d:f4:12:b8:1c:ca:26:b0:9f:72:7e:61:2d:ce:ef:
82:49:12:6c:e4:1b:fd:cb:ef:41:c2:b6:b6:34:4a:13:96:f2:
0f:94:52:ef:c8:95:ea:52:2e:86:b0:3e:dd:80:23:a7:ec:26:
65:88:b1:0e:e7:89:66:48:af:f3:4e:be:10:74:29:ac:d2:a1:
2f:10:32:27:66:f6:3a:27:ff:2f:51:d5:6d:d5:af:0d:11:0a:
ce:14:20:f9:33:fb:ec:4e:4e:ee:60:a1:5d:31:1d:54:07:70:
25:c7:eb:d4:9d:44:d6:77:85:3b:20:65:d6:e5:fe:31:29:23:
a2:01:a8:c3:6a:73:10:56:fd:77:65:fa:09:cc:fe:80:1d:2a:
7d:6d:92:c4:27:55:f0:92:32:40:b4:41:fd:f3:a8:9d:cc:ed:
84:17:34:12:74:fc:87:9a:f3:9d:b8:77:14:e8:0e:47:92:b2:
6b:dc:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:09:42 2026 by rpki-client